CVE-2026-102059 Junos OS and Junos OS Evolved: EX Series, SRX Series, QFX Series: A rogue DHCP server causes root-level command execution when the phone-home client processes specific information

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the phone-home daemon phcd of Juniper Networks Junos OS and Junos OS Evolved on EX Series, SRX Series, and QFX Series allows an adjacent unauthenticated attacker to execute arbitrary...

CVE-2026-102059

Juniper Networks Junos OS and Junos OS Evolved on EX Series , SRX Series , and QFX Series are vulnerable to an OS Command Injection (CWE-78) vulnerability. The flaw exists in the phone-home daemon (phcd) , where the software fails to properly neutralize special elements used in OS commands. This ...

EUVD-2026-101362

An XML Injection vulnerability in the Unified Threat Management daemon utmd of Juniper Networks Junos OS on SRX Series devices allows an unauthenticated network attacker to commit arbitrary device configuration with root privileges via a malicious response from a configured custom URL-feed server...

CVE-2026-102037 Junos OS: SRX Series: An attacker causes arbitrary configuration commit when the custom URL-feed feature is used

An XML Injection vulnerability in the Unified Threat Management daemon utmd of Juniper Networks Junos OS on SRX Series devices allows an unauthenticated network attacker to commit arbitrary device configuration with root privileges via a malicious response from a configured custom URL-feed server...

CVE-2026-102037

An XML Injection vulnerability exists in the Unified Threat Management daemon (utmd) of Juniper Networks Junos OS on SRX Series devices. This flaw allows an unauthenticated network attacker to commit arbitrary device configurations with root privileges . The attack is triggered via a malicious re...

EUVD-2026-101356

An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user to execute commands with root privileges when periodic TACACS+ authorization-refresh is enabled...

CVE-2026-102031 Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled

An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user to execute commands with root privileges when periodic TACACS+ authorization-refresh is enabled...

CVE-2026-102031

A critical OS Command Injection vulnerability exists in the TACACS component of Juniper Networks Junos OS Evolved . When periodic TACACS+ authorization-refresh is enabled, a low-privileged TACACS+-authenticated user can execute arbitrary commands with root privileges . No specific affected versio...

CVE-2026-101968

An Integer Underflow (Wrap or Wraparound) vulnerability exists in the rpd process of Juniper Networks Junos OS (EX Series and MX Series) and Junos OS Evolved (ACX Series). When Rosen-MVPN data-MDT is enabled, an unauthenticated adjacent attacker can exploit this flaw using a malformed Rosen-MVPN ...

CVE-2026-101968 Junos OS and Junos OS Evolved: EX Series, MX Series, ACX Series: An attacker causes rpd heap memory disclosure when Rosen-MVPN data-MDT is enabled

An Integer Underflow Wrap or Wraparound vulnerability in the rpd process of Juniper Networks Junos OS on EX Series and MX Series, and Junos OS Evolved on ACX Series allows an unauthenticated adjacent attacker to cause heap memory disclosure and multicast join-state injection via a malformed...

EUVD-2026-101325

An Integer Underflow Wrap or Wraparound vulnerability in the rpd process of Juniper Networks Junos OS on EX Series and MX Series, and Junos OS Evolved on ACX Series allows an unauthenticated adjacent attacker to cause heap memory disclosure and multicast join-state injection via a malformed...

EUVD-2026-101469

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ipfd of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a configured Security Intelligence feed connection...

CVE-2026-101997

Juniper Networks Junos OS on SRX Series is vulnerable to an SQL Injection vulnerability within the ipfd component. An unauthenticated network-based attacker can exploit this flaw to achieve Remote Code Execution with root privileges when a Security Intelligence feed connection is configured witho...

CVE-2026-101997 Junos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authentication

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ipfd of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a configured Security Intelligence feed connection...

CVE-2026-102079 Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands allows command injection

An OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete control of the device. A specific 'request csds' command doesn't sanitize user provided input so that it can be interpreted as a command. This allows unintended...

EUVD-2026-101465

An OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete control of the device. A specific 'request csds' command doesn't sanitize user provided input so that it can be interpreted as a command. This allows unintended...

CVE-2026-102079

Juniper Networks Junos OS is vulnerable to an OS command injection vulnerability within the CLI. The issue stems from a lack of input sanitization in a specific 'request csds' command, allowing a local, low-privileged attacker to execute unintended commands with root privileges . This could resul...

CVE-2026-93635

The Zimbra Collaboration Suite (versions 10.1.0 through 10.1.21) is vulnerable to an LDAP filter injection caused by unescaped computeDn() template substitutions. This flaw allows unauthenticated attackers to manipulate external LDAP search filters. In environments utilizing search-filter authent...

EUVD-2026-101457

LDAP filter injection in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to alter external LDAP search filters. On domains using search-filter authentication and lazy provisioning, this creates a password oracle for external directory users. Authenticated S/MIME...

CVE-2026-93635 Zimbra Collaboration Suite LDAP Filter Injection via Unescaped computeDn() Template Substitution

LDAP filter injection in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to alter external LDAP search filters. On domains using search-filter authentication and lazy provisioning, this creates a password oracle for external directory users. Authenticated S/MIME...